Critical
CVE-2018-1287
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2018-1286
Apache OpenMeetings may allow authenticated attacker to deny service for privileged users
High
CVE-2018-12642
Froxlor Incorrect Access Control
High
CVE-2018-12457
express-cart allows any user to create an admin user
Medium
CVE-2018-1136
Moodle Cross-site Scripting
Medium
CVE-2018-1134
Moodle Improper Privilege Management
High
CVE-2018-11047
Cloud Foundry UAA accepts refresh token as access token on admin endpoints
Medium
CVE-2018-1043
Moodle Setting for blocked hosts list can be bypassed with multiple A record hostnames
High
CVE-2018-10406
An issue was discovered in Yelp OSXCollector. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the u
High
CVE-2018-1000865
Improper Privilege Management in Jenkins
High
CVE-2018-1000866
Jenkins Script Security and Pipeline Groovy Plugins Sandbox Bypass
Medium
CVE-2018-1000864
Loop with Unreachable Exit Condition in Jenkins
High
CVE-2018-1000863
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
High
CVE-2018-1000817
Asset Pipeline Grails Plugin vulnerable to Path Traversal
High
CVE-2018-1000610
Jenkins Configuration as Code Plugin has Insufficiently Protected Credentials
High
CVE-2018-1000603
CSRF vulnerability and missing permission checks in Openstack Cloud Plugin allowed capturing credentials
High
CVE-2018-1000600
CSRF vulnerability and missing permission checks in GitHub Plugin allowed capturing credentials
Low
CVE-2018-1000608
Jenkins z/OS Connector Plugin allows local attacker to retrieve configured password
High
CVE-2018-1000401
Jenkins AWS CodePipeline Plugin has Insufficiently Protected Credentials
Medium
CVE-2018-1000420
Improper authorization vulnerability in Jenkins Mesos Plugin
High
CVE-2018-1000403
AWS CodeDeploy Plugin stored AWS Secret Key in plain text
Medium
CVE-2018-1000408
Improper Authorization in Jenkins
High
CVE-2018-1000404
Insufficiently Protected Credentials in Jenkins AWS CodeBuild Plugin
Critical
CVE-2018-1000226
Cobbler Improper Validation of Security Tokens
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.